Enterprise Architect

h3Company Description /h3pSopra Steria offers tailored, end-to-end corporate technology and software solutions to help clients make bold choices and deliver results. Successfully so With more than 51.000 colleagues in 30 countries, we rank as Europe’s leading digital solutions provider. Some of the most successful companies in Europe rely on our technology due to our commitment to innovation, collaboration, and value in business development. /ppThe world is how we shape it. Let’s shape it together. /ph3Job Description /h3pWe are looking for an bEnterprise Architect specializing in Cloud Digital Sovereignty /b to help shape our enterprise cloud strategy and architecture. /ppIn this role, you will define and evolve our cloud architecture across bpublic, private, hybrid, multi-cloud, and sovereign cloud environments /b, ensuring that technology choices align with business objectives as well as security, regulatory, data residency, and digital sovereignty requirements. /ppYou will work at the intersection of benterprise architecture, cloud, security, legal and regulatory requirements /b, helping the organisation make informed architectural decisions in an increasingly complex European cloud landscape. /ph3Key Responsibilities /h3ullibCloud Strategy: /b Define and evolve the enterprise cloud architecture strategy across public, private, hybrid, multi-cloud, and sovereign cloud environments, aligned with business, technology, security, and regulatory objectives. /lilibTarget Architecture: /b Define target-state cloud architectures and reference patterns covering compute, storage, networking, identity, integration, platform services, and cloud-native capabilities. /lilibDigital Sovereignty: /b Translate digital sovereignty requirements into architecture principles and design choices, considering areas such as data residency, jurisdiction, operational control, technological dependency, and exposure to extraterritorial legislation. /lilibCloud Governance: /b Define and promote cloud governance principles and guardrails, including landing zones, account and subscription structures, policy enforcement, tagging, cost governance, and workload placement. /lilibSecurity Architecture: /b Establish cloud architecture principles for identity and access management, network security, encryption, key management, secrets management, and Zero Trust. /lilibSovereign Cloud: /b Assess sovereign and trusted cloud models and determine where they fit within the enterprise cloud strategy, based on workload sensitivity, regulatory requirements, risk, and business needs. /lilibRegulatory Collaboration: /b Work closely with Legal, Compliance, Security, Risk, and Data Protection stakeholders to translate applicable regulatory and sovereignty requirements into architecture decisions. /lilibCloud Migration Modernisation: /b Guide application, platform, and infrastructure teams through cloud migration and modernisation initiatives while maintaining architectural consistency and addressing relevant sovereignty requirements. /lilibPortability Reversibility: /b Define architecture principles for portability, interoperability, exit strategies, and reversibility to manage strategic dependencies and vendor lock-in. /lilibArchitecture Reviews: /b Lead architecture reviews and contribute to technology risk assessments for cloud initiatives, with particular attention to data classification, jurisdiction, security, resilience, and sovereignty. /lilibExecutive Advisory: /b Advise senior stakeholders on cloud architecture, digital sovereignty, technology dependencies, associated risks, and strategic trade-offs. /lilibTechnology Regulatory Watch: /b Monitor developments in cloud technology, European digital sovereignty, cybersecurity, and regulation and assess their potential impact on the enterprise architecture roadmap. /li /ulh3Qualifications /h3ulliExtensive experience in bcloud architecture, infrastructure architecture, enterprise architecture, or comparable technical leadership roles /b. /liliDeep expertise in bat least one major cloud ecosystem /b, such as Microsoft Azure, AWS, or Google Cloud, combined with a good understanding of broader hybrid and multi-cloud architecture principles. /liliStrong understanding of bdigital sovereignty and cloud-related regulatory considerations /b, including topics such as data residency, jurisdiction, GDPR, NIS2, and extraterritorial legislation such as the US CLOUD Act. /liliExperience designing or governing bcloud landing zones, multi-account or multi-subscription environments, and cloud security architectures /b. /liliStrong understanding of bidentity and access management, network architecture, encryption, key management, secrets management, and Zero Trust principles /b in cloud environments. /liliUnderstanding of cryptographic key management models, including concepts such as bBYOK, HYOK, and HSM-based key management /b. /liliExperience with bhybrid and multi-cloud architecture patterns /b, including por